Summary
Peter Pi discovered a buffer overflow in the virtio network backend
(vhost_net) implementation in the Linux kernel. An attacker in a guest may
be able to use this to cause a denial of service (host OS crash) or
possibly execute arbitrary code in the host OS. (CVE-2019-14835)
It was discovered that the Linux kernel on PowerPC architectures did not
properly handle Facility Unavailable exceptions in some situations. A local
attacker could use this to expose sensitive information. (CVE-2019-15030)
It was discovered that the Linux kernel on PowerPC architectures did not
properly handle exceptions on interrupts in some situations. A local
attacker could use this to expose sensitive information. (CVE-2019-15031)
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-164.192 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1094.105 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1050.52~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1059.64 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1044.46 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-64.73~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1058.65 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1025.28~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1122.131 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1126.132 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-64.73 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1050.52 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure | 5.0.0-1020.21~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp | 4.15.0-1044.70 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-4.15 | 4.15.0-1044.46 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.0 | 5.0.0-1017.17~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 5.0.0-29.31~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1046.46 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1056.65 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1025.28 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1047.51 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-snapdragon | 4.15.0-1064.71 |
Vulnerabilities 3
-
High 7.2
A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that …
-
Unscored —
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' proc…
-
Unscored —
In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' proc…